Skip to content
NewA calmer, faster ZeroHour
Toolsinfo

How a team of entity maintainers monitors, connects and scores entities in Elastic Security

Elastic Security Labsby Uri Weisman,Mike Paquette ()1 · 1 read
AI summary · glm-5.3-flashSummaries by Vani AI

Elastic Security explains how background 'maintainer' jobs build user, host and service entities from raw logs and drive identity resolution and risk scoring.

Elastic Security Labs describes the internal background jobs, called maintainers, that each own one piece of every user, host and service record in Elastic Security. The maintainers construct entities from raw logs, resolve identities across sources and compute risk scores, and the write-up explains how the team keeps this entity machinery consistent.

Key facts
  • Background 'maintainer' jobs each own part of user, host and service records in Elastic Security
  • Maintainers build entities from raw logs, resolve identities and score risk
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

Inside Elastic Security, background jobs called maintainers each own one piece of every user, host and service record, from building entities out of raw logs to resolving identities and scoring risk.

Elastic Security Labs

By Uri Weisman,Mike Paquette · elastic.co

Read the full article at Elastic Security Labs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.